core: allow listening on tls without listening on tcp

- reported in FS#425