The automation agent needs the ability to specify an SSL SNI hostname that is different than the hostname in the mongo connection string.  We currently do this in mgo by using a custom mgo.DialInfo which has a custom DialServer which calls tls.DialWithDialer() with a tls.Config which specifies ServerName