Since we're supplying a Lamassu-signed certificate, rejectUnauthorized should be true.