Need to configure Jersey to use https, with client certificate authentication and (optionally?) no server certificate check.