server: add support for TLS