in reply to Another way to catch rsync STDERR
Have you tried supplying the commands needed for rsync certificate authentication through the ->defopts method?