Pluma engine-validation item 4: real TLS OK