Use server cert + authenticate.