pass correct policy for shared secret
change demo default to tls