I feel like mTLS could still work in third-party signing.