A good reason to actually test that you reject man in the middle certs if you rely on TLS in your application