Use TLS by default on callouts/cutthroughs