<refsect1>
	<title>Encrypted Connections</title>
	<para>
		This client supports TLS encrypted connections. It is strongly
		recommended that you use an encrypted connection for anything more than
		the most basic setup.
	</para>
	<para>
		To enable TLS connections when using x509 certificates, one of
		either <option>--cafile</option> or <option>--capath</option> can
		be provided as an option.
	</para>
	<para>
		Alternatively, if the <option>-p 8883</option> option is used
		then the OS provided certificates will be loaded and neither
		<option>--cafile</option> or <option>--capath</option> are
		needed.
	</para>
	<para>
		To enable TLS connections when using TLS-PSK, you must use the
		<option>--psk</option> and the <option>--psk-identity</option>
		options.
	</para>
</refsect1>
