This is due to Exchange requirements for TLS authentication, which needs to be enabled for sending and receiving connector.
See the Help for Set-ReceiveConnector:
http://technet.microsoft.com/en-us/library/bb125140.aspxAnd for Set-SendConnector:
http://technet.microsoft.com/en-us/library/aa998294.aspxDomainSecureEnabled is set to $true on default send/receive connectors on Edge Transport to enable mutual TLS, so TLS must also be an available authentication mechanism. The parameter is AuthMechanism on a receive connector and SmartHostAuthMechanism on a send connector.