move secure r inside of tls extensions