And the provider implementation is my own, running on a server I have physical access to, with a self-signed certificate.