prevent calls to enable tls unless connected