Set tls flag defaults and add -tlsverify