- DOCUSEAL_CONFIG_SMTP_SECURITY supports tls/ssl/noverify - DOCUSEAL_CONFIG_SMTP_AUTHENTICATION overrides default :plain when password set - noverify mode enables starttls_auto with VERIFY_NONE for self-signed cert servers - mirrors EncryptedConfig form security/authentication semantics