You should be able to set any configuration option listed in the second section of osqueryd —help with a tls config. If that doesn’t work, it would be a bug.