- Konnectd uses no TLS as it is behind the proxy - Glauth generates dev-certificates for ldap on startup if none are provided, - Glauth can launch unencrypted (9125) and encrypted (9126) port in parallel