WGet scripts should reflect either a "token" as URL parameters or a certificate parameter depending on whether the endpoint access capability requires authorization token. In the case of "token-less" x509 certificate access, the script should also enforce "mutual authentication" and require the server's SSL certificate be valid.