allow tls config to be specified