Returns a human-readable description of the TLS mode (e.g., "plaintext" or "TLS with mutual auth").
a description string suitable for logging