* update to config file to use TLS * generates self-signed certs if none exist and saves them in config dir