managed to get TLS working;
switching to plain old files for some of the more stable state elements