wow, mutual auth for TLS nice. Don't want to hear any client asking for the 'ip addresses Netsuite uses' as a (weak) security mechanism ever again!