Use (as client) and verify (as server) configured XAuth identities