Add option to enforce STARTTLS