Move TLS options out of <paths>

The TLS options (, (maybe more in future?)) are in . Should they be moved outside? If so where to?