
Add passive-mode (daemon does -xv run)
Check ssl certificates (server and client)

