config: explicitly opt-out TLS

[lucab]

While this doesn't implement TLS for now, users should assume TLS is the default mode and opt-out in config.