Clarify current client behavior WRT TLS certificates. Add a TODO to make sure that...