add optional tls-auth enable (and accidentalyl fix whitespace)