I agree, **iff** we allow this configuration at all...

Specifically, I'm suggesting that the desirable alternative is for `nsqd` to fatally error during initialization if you specify TLS is required but don't enable it.