Add EnableTLS policy, move tlsConfig to server