TLS: fix startup after forced-fail