client_encryption_options:
  enabled: true
  optional: false
  keystore: /etc/cassandra/tls/server-keystore.p12
  keystore_password: REPLACE_WITH_KEYSTORE_PASSWORD
  store_type: PKCS12
  require_client_auth: false