use https through the tunnel, if tls enabled