add basic tls support, todo: error handling