tls is no optional