tls: ensure that TLS compression is disabled

This should now be the default everywhere, but just in case.