I don't want to bother with client keys.
I just need the server to require a secure connection and a password/passphrase.
How do I do that? it's not quite intuitive. You go to config the DSM plugin and you can enter a passphrase, but it still won't authenticate without the client key on the client machine.