Supported authentication path for an out-of-process Rust client to a local mTLS gateway

[dredozubov]

OpenShell’s gateway authentication documentation describes mTLS as the default for local gateways without OIDC. The current SDK transport appears to support server CA configuration while leaving client-certificate mTLS to the CLI path.

What is the intended supported connection path for an out-of-process Rust client?

• an openshell-sdk configuration I missed;
• a lower-level public gRPC client loading the CLI-managed mTLS bundle;
• OIDC or edge authentication instead; or
• planned SDK client-certificate support?

I want to avoid treating plaintext or unauthenticated loopback as a supported integration contract. If this is mainly a documentation gap, I would be happy to contribute a focused clarification or test.