Proper encapsulation of information

the function to load dh params should check for a NULL filename.
The callers shouldn't care
Re-arrangement for ifdef WITH_TLS
WARN for old-style client configuration

so we don't have surprises
TLS clients and non-TLS listeners are forbidden