:+1: on the `tls-root-ca-file`. For the `tls-client-status`, I was hesitant to use `verify` simply because one of the value options includes `verify`, and having it within the name implies that verification will happen, which may not depending on the value provided. What do you think about `tls-client-enforcement` ?