Lines 67-69 are confusing. Do you meant to say you can not use certificate-based authentication over HTTP or HTTPS? The former won't work due to HTTPS being a requirement, and the latter won't work because only the PB API supports certificate-based authentication.