advertise STARTTLS support