always glad my internal services remain under mTLS and externally behind Pomerium. want to exploit a vulnerability? good fucking luck, you can’t even complete the TLS handshake without a valid client certificate