Currently, the source and sink plugins are unable to authenticate with client certificates unless the client certificate is installed in the system keystore (https://www.mongodb.com/docs/drivers/java/sync/current/fundamentals/connection/tls/#configure-the-jvm-key-store). Connection string properties are not supported by the Java client (JAVA-3066).

For multi-tenant Connect clusters, it'd be helpful to add configuration properties for truststore/keystore path/passphrase so that connectors could control those independently of the cluster configuration.