As an alternative to T2061, wurf could also use TLS directly.

For example:

• at Nasqueron, we could use a certificate managed in OpenBao to serve file across Drake network
• for home use, with a dyndns / Let's Encrypt combo, why not ask a certificate?