Cool. So as long as I'm my own CA and I use self-signed certificated (distributed off-band) then I'm safe.