tls: do not default to 'localhost' servername