Just discovered that twinkle does not support TLS for the SIP auth.

Fortunately, there is another project called SFLphone with TLS and ZRTP support :)

So the plan now is to use the SFLphone core. I'll have to write the software to interact between the UI and the core.