1. All Agents (all exporters and all QAN agents), connection checkers and Actions should be able to connect to the data sources via SSL/TLS with two configurable options:

   1. Enable/disable TLS

   2. Enable/disable InsecureSkipVerify or equivalent

2. It should be possible to configure all Agents to use SSL/TLS via pmm-managed / pmm-admin / UI

Various advanced TLS options that are not in scope:

1. TLS auto-detection ("prefer TLS, but do not require it")

2. Client certificates

3. Server certificate pinning