allow_tls set to false