gac-direct-pl2 tls fallback