write_http: expose more TLS options