* Document current manual mTLS setup and workarounds * Explain mTLS for transport vs. PKI realm authentication * List limitations (Elastic Agent/Beats) * Provide example manifests
