ITS#8427 don't set tls_ctx if TLS wasn't requested Also, set any remaining TLS options that weren't carried along in the TLS ctx.