fix symbol acceptance/rejection rules for TLS