Secure .internal private networking endpoints

I might be terribly wrong here, but Fly 6pn is secure by design; ie, nothing outside the network namespace of your organization can send requests to the 6pn / Flycast address.

In sum, one needn’t worry about mutual auth on 6pn.