clean up StartTLS API
doc strings