Should be possible in kafka database to modify advance configuration. For example to be able to disable the use of CA certificate or decide which protocol/mechanism is allowed on config level.