* support tls for values file access

- uses --ca-file / --cert-file / --key-file

* also for upgrade command