Clarifying API Key.
Removing reference to 'username'.
Use taskd.trust instead of distributing the CA certificate in case I want to switch certs later.