Work around XO-Server incomplete TLS