Use apns-clerk instead of apns-client as apns-client does not support TLSv1