throw exception if TLS desired but not working