use TLS field in preference to URL.Scheme