Default tls_use_crl to "true".