spec and fix tls option passing