TLS section must appear higher in the config
Standardise return codes