Use certs for auth, but use ephemeral keys for AES key exchange.
Use certs for auth, but use ephemeral keys for AES key exchange.