We should enable TLS support between clients and Praefect, and between Gitaly and Praefect. We currently support TLS between clients and Gitaly.