auto enable TLS negotation when setting other TLS options

rfr @jehiah