tls option is false by default