make sure timeout only applies for TLS upgrade