Move unauth TLS out of scope