TLS client certificate is not in the approved table.
Pair and hello use this so the phone can register with the PIN instead of matching the message text.