TLSClientConfig requires both valids keyfile and certfile or none