[gandalfu]

Why certificate based authentication wasn't included?

The server stores the public cert from all clients and uses it to authenticate at the transport layer. No shared secrets either.

[ksri]

Yes, that's a miss. I'll add it as another option. Thanks!