ITS#8427 don't set tls_ctx if TLS wasn't requested

Also, set any remaining TLS options that weren't carried along
in the TLS ctx.
4 jobs for its8427b in 58 minutes and 43 seconds