pass along options to tls.connect when redirecting