explicitly set TLS