enable smtp tls by default, reorganize tls/sasl template blocks