enable tls by default