make the TLS setup optional