debug: true collections: live: $live certificates: cert_reqs: 'CERT_REQUIRED'