move TLS/SSL selection into start, depending on CONDUIT_TLS environment variable and available libraries