TLS and Mutual Authentication

Hi all,
I am reading the documentation about ejabberd and I found the configuration for the tls. But I think the starttls parameter is only for the simple tls (only server is authenticated). I search for mutual authentication where also the client must have a valid certificate from the same CA of the server.
I want to use the In-Band registration but I want permit the request only from certain hosts (Authorized).

Do Ejabberd support mutual authentication? If yes, how I can specify it in configuration file?
Are there other method to solve my issue (permit only authorized host to register)? (I can't use domain/host mask because I don't know before what nodes will required the registration of account).

Thanks for all,
A.