only use yes or no for tls_require_cert