nicer enum handling
TLSStream