* Adds a —skip-client-cert-verify option to allow self-signed client certificates in server mode
* If —skip-client-cert-verify is enabled, make sure we don’t put certificate values into the environment.
* Adds a —tls-export-cname option to allow the —tls-verify script to change the connection common name.