pub fn tls() -> NameServerConfig