DefaultHTTPClient tlsConfig required in case of cert-based identity config.

DefaultTLSConfig creates default tls.Config.

NewRequestWithUserAgent creates a request and sets the libs custom user agent it would be nicer to set this in the default http.client, but it's discouraged to manipulate the request in RoundTrip per official documentation.