tls: fix syntax and more depopt constraint into a conflicts field