Okhttp with custom key/trust managers should support other providers. Probably returning an empty list of certs, or raw access to handshake?