(I realize (and care very much about) the client consideration here: The client wants to have some level of confidence it is dealing with the correct server, etc...)
