locksmithctl: add TLS support