I think that we are missing a why here. Maybe we can point out that in the sample tls sample on Temporal, the certs are generated locally which cause some inconveniences: insecure, hard to rotate and swap with trusted certs...