Configurable fallback to unauthenticated TLS