Currently setupMeshEx.sh create a variable CONTROL_PLANE_AUTH_POLICY in cluster.env to enable/disable control plane mTLS for VM. ``` ... echo "CONTROL_PLANE_AUTH_POLICY=$CP_AUTH_POLICY" >> cluster.env ... ``` It should be ``` ... echo "ISTIO_CP_AUTH=$CP_AUTH_POLICY" >> cluster.env ... ``` since istio-start.sh https://github.com/istio/istio/blob/26262e8a1d89c4cd17f52db645d91ce9d9918e6e/tools/deb/istio-start.sh#L48 looks for ```ISTIO_CP_AUTH```