[londons_explore]

And the client certs can be tpm backed so they can't be copy+pasted to other machines.