whoops, fix default TLS settings