Only use self-signed TLS cert/key if TLS is enabled