mock app/server use TLS (with supplied credentials)