west to east, both do not have their peer certificates cached
west has leftsendcert=always with a specific rightca

east has strictcrlpolicy=yes and the mainca crl is cached locally
