Ah yeah I'm looking back at your original question... Setting a

tls

config plugin from the filesystem config plugin is likely to produce strange results. Choose one or the other and indicate it in your flagfile.