Add TLS option, on by default.