require TSL connection; fixes #11