connection: allow supplying of tls.connect() options