correctly type TLS and SASL config options