tls: added no_tls_hosts option