AMQP uses amqps:// over TLS. SASL EXTERNAL (client certificate) may be required. Provider may use server certificates in the EACP chain at a later point.