Comment by hypeatei

> many endpoints only need to accept requests from known (identified, authenticated, authorized) endpoints

Do you mean clients for the last part? I'm not a networking expert but I don't see how layering on certs here is going to help?