(1) Which email providers are supported?
(2) What is a valid security certificate?
Valid security certificates are officially signed (not self signed) and have matching a host name.
(3) Which permissions are needed and why?
If you have another question, you can use this forum.