add TLS by default