Envoy VM expansion must be configured with MUTUAL_TLS?

Hi,
After testing it seems to run Envoy on VM with mesh expansion the Pilot deployment must be configured with MUTUAL_TLS parameter, it that true or I made something wrong here?

@irisdingbj @cereus725 FYI as well.