make TLS support configurable