defaultScheme based on tls