this should be `tlsRequired: n.options.TLSClientAuthPolicy != ""`, right?