Document TLS options in phase1/phase2