AMQP uses amqps:// over TLS. SASL EXTERNAL (client certificate) may be required. Provider aims to use server certificates in the EACP chain once available. Client certificate policy for consumers is under consideration.