TLS 1.0 still enabled after setting tls_policy to recommended

Thanks for following up on that Matt!