TODOs Add support for certificate chains (intermediate CAs) Add support for HTTPS client auth, to obviate username/password Testcases for chain creation and deletion Support for dport and sport via API Persist state somehow