support TLS option