Supported clients must access a supported Windows file server over an untrusted network using SMB over QUIC. What must the design include?

1. Public exposure of unrestricted TCP 445 as the defining requirement
2. An assumption that ordinary SMB automatically uses QUIC on every version
3. Removal of server authentication
4. Supported server/client versions, suitable certificates, and required QUIC connectivity