Connecting Terraform to LXD API server over CF Tunnel

We are attempting to use the Terraform LXD provider to connect to a remote LXD instance that is accessible via a Cloudflare Tunnel, so that we can run Terraform builds in CI.

The LXD API server generates a client cert/key, which the Terraform provider expects to be able to use to connect with.

How can we make that work? LXD API server also supports a websocket over http, but it appears the Cloudflare tunnel only supports https websockets at this time.