D. Allowed Protocols, CAP for an Identity Store, and trusting the signing CA for client authentication are all that is required.