...
The overall idea is to be able to allow N number of MiNiFi clients to securely communicate with a secure NiFi cluster without having to control access to flow components through coarse grained access control but without having to rely on sharing of digital certificates across multiple agents (something that is VERY poor practice).
The following Diagram shows how this would work:
...