MTLS would do the job, but you still just need one compromised customer.