fix tls host connections for `new`