I am using AWX/tower through a bastion-host/access-proxy (i.e. teleport) which mandates mutual TLS connections. The python requests library (used by towerlib) already has a way to specify client-side certificates for a mutual-TLS connection.
(https://requests.readthedocs.io/en/latest/user/advanced/#client-side-certificates)
Are you able to expose this option through the towerlib.Tower class API?