list ::tls::socket -autoservername true -require true -cadir /etc/ssl/certs