journalwatch: allow more TLS errors