tls: permit psks to be configured for clients