Rename client backend tls config attr to just 'tls'

For uniformity with the serverutil package. Also, make error checking
on client TLS setup a bit stricter.