api: move tls settings to their own namespace
docs/config: fix docs for TLS configuration