tls: enable host verification by hostname