Purpose of client key / cert unclear in setup guide. PKI docs confusing in general.

I'd very much like to setup a taskserver instance, and consider myself to reasonably adept with pki (have managed certificates / for smbs). I have to confess being completely confused by the server guide. I think it would be _really_ useful to have a concise statement on _how_ pki is used and what role each option in the config plays in that.

I _think_ taskserver has a really standard setup of mutual tls, and server authentication of client certificates consists of checking if the client certificate is signed by our ca. A cursory reading of the TLSTransaction code seems to confirm this. Using self-signed _client_ certificates is both sensible and secure. The docs don't make this clear at all and spend far more time lecturing on not switching off verification rather giving them the information they need to generate a proper pki setup. There is also no explanation of what the purpose of the client.{cert,key} options are. I had a quick scan of some of the server code and they don't seem to be read on startup, they aren't mentioned in the man pages. Mystery.

I am going to have a go at setting this up in the next few days and if I can get to a decent place, I'll be happy to try and write some words.