drafted TLS configuration