move starttls to the public interface