record tls fingerprint in config (depends on unmerged PRs in x.509 and tls)