I have an ejabberd with TLS only on a custom port. I can enter a custom port in primitivus, but not that the connection were direct TLS. It seems to me, that sat always tries plain/STARTTLS. Supporting direct TLS by configuring it manually would be very helpful.