move the --tls option down into the swaks_auth section; make it --tlsc instead; add...