Explaining mutual authentication