tls attribute now accepts paths instead of contents