You shouldn't be limiting TLS to paid subscribers.
Everyone can benefit from that.
Are you sure that your advertisers can't run TLS too...