We don't need to set tls_certificate to -1 in prep_cfg() because

it's only called from load_cfg() which has already set it to -1.

We also don't need to check prepped twice to make sure it's extra true.