Support TLS, dynamic listeners and encrypted storage

Well, that would be unfortunate, but it's still convenient to have it in tests/devmode