use tls config during handshake, nil value for tls.Config is not permitted by tls.Client