Function cleartext_connect_allowed 

pub fn cleartext_connect_allowed(
    addr: SocketAddr,
    tls_enabled: bool,
    allow_insecure: bool,
) -> bool

Whether a cleartext client connection to addr is permitted.

• TLS enabled → always allowed
• Cleartext to loopback → allowed (local dev)
• Cleartext to non-loopback → only when allow_insecure is set