password auth enabled along with optional ssl cert auth