- add isc_nm_tlsdnsconnect() function - add "+[no]tls" option to dig to enable TLS mode - override the default port number in dig from 53 to 853 when using TLS