Need to enable encryption of isolate connections, and optionally also extend server side filtering to verify client-side certificates.