add client TLS support