enable SSL

* pass *tls.Config to each new connection