- Replace `--tls-disable-redirect` (default false) with `--tls-redirect`
  (default true) to avoid double-negative, for clarity