code: func (c *ConnectionStore) verifyHandshake(endpoint string, certificate []byte) RemoteVerifier {
  	return func(rawCerts [][]byte, verifiedChains [][]*x509.Certificate) error {
  		if bytes.Equal(certificate, rawCerts[0]) {
  			return nil
  		}
  		return errors.Errorf("certificate presented by %s doesn't match any authorized certificate", endpoint)
  	}
  }
docs: // verifyHandshake returns a predicate that verifies that the remote node authenticates
  // itself with the given TLS certificate