- by default, do not require TLS (connection security can be guaranteed by the underlying service mesh, e.g. istio) - add a new ENV variable to allow configuring TLS as mandatory
- Introduce the "probe" script for K8s probes
- Drop support for AmavisD - Drop support for client certificates - the authentication should be left to the underlying infrastructure (e.g. istio)