Currently for a host to be discovered using check type "Zabbix agent" the latter must be configured to accept unencrypted connections.

Would be great if there were more options for discovery of encrypted-only Zabbix agents. (Like we already have for SNMP agent discovery.)