properties trimmed down for TLS