use srv auth only as default ssl mode