Allow password protected server keys

Also enables use_tls by default.