This works in tandem with opm/index/cmd, which adds the relevant flags as persistent as part of the root command (cmd/root/cmd) initialization.

GetTLSOptions validates and returns TLS options set by opm flags.