Listen on regular TCP and forward to TLS (simpler than stunnel)