Only execute add-host-to-channel if add-host was successful. The former throws exceptions.
Instead of using client certificates, use kerberos auth.