refactor(tls): clarify & simplify tls configuration