Baby steps 🙂 I think I'll try TLS without client authentication first. That's going to be a lot of work and I need IT to help me come up with a system to manage it all.