add verify tls_opts only when we open connection