Client Certificates for authentication on HTTPS request

Neither scenario is supported in a first class way.

The outbound HTTP calls are possible if you go straight to Java APIs instead. There's an example in this post where someone else got it working. This isn't something we document anywhere.