configurable use of TLS