clientMode -> useClientMode, consistent with SSLEngine