Fix missing paren on client auth policy description
Add enforcement of TLS upgraded connection when required by options