Example of a working pjsip.conf for Twilio with TLS/SRTP?

Thanks - Do I still need to specify “transport = transport-tls” if I specify “sips” as the protocol" In any case, I made the following adjustments but still not working. The Twilio documentation has examples but none for TLS, in any case it almost exactly matches my configuration. So not sure what’s going on.

; TWILIO ROUTE --------------
[twilio]
type = registration
outbound_auth = twilio
client_uri = sips:pbx@pbx.pstn.twilio.com:5061
server_uri = sips:pbx.pstn.twilio.com:5061
expiration = 600

[twilio]
type = auth
auth_type = userpass
username = user
password = pass

[twilio]
type = aor
contact = sips:pbx.pstn.twilio.com:5061
qualify_frequency = 60

[twilio]
type = endpoint
transport = transport-tls
context = mainroute
allow = !all,ulaw
from_user = pbx
outbound_auth = twilio
aors = twilio
media_encryption=sdes
rewrite_contact=yes
rtp_symmetric=yes

[twilio]
type = identify
endpoint = twilio
match = pbx.pstn.twilio.com
; -----------------------------------
REGISTER sips:pbx.pstn.twilio.com:5061 SIP/2.0
Via: SIP/2.0/TLS 1.2.3.4:5061;rport;branch=z9hG4bKPj1506c39a-e64a-4d76-97a1-220cfadc46b6;alias
From: <sips:pbx@pbx.pstn.twilio.com>;tag=d2bdef11-8541-4983-8a53-3ba29ae55aec
To: <sips:pbx@pbx.pstn.twilio.com>
Call-ID: 24731463-24cb-407e-b775-bfe375f2e270
CSeq: 64302 REGISTER
Contact: <sips:s@1.2.3.4:5061;transport=TLS>
Expires: 600
Allow: OPTIONS, REGISTER, SUBSCRIBE, NOTIFY, PUBLISH, INVITE, ACK, BYE, CANCEL, UPDATE, PRACK, MESSAGE, REFER
Max-Forwards: 70
User-Agent: Asterisk PBX 19.4.0
Content-Length:  0

<--- Received SIP response (416 bytes) from TLS:54.172.60.2:5061 --->
SIP/2.0 200 OK
Via: SIP/2.0/TLS 1.2.3.4:5061;rport=36335;branch=z9hG4bKPj20a452a3-b4be-421b-9184-bc6d081a6e12;alias;received=1.2.3.4
From: <sip:pbx@1.2.3.4>;tag=76ebe59f-3f5e-485a-8494-8edfdb039c4f
To: <sips:pbx.pstn.twilio.com>;tag=0b91719d19ced0efc736a6dd0f485d58.4fd50a91
Call-ID: 2b987f26-7ec3-4853-8cf9-40bc629c8429
CSeq: 35739 OPTIONS
Server: Twilio Gateway
Content-Length: 0