TLS Settings inbound and outbound

I have a requst from a client to force TLS to their domain names, the way i have setup this is;

Inbound:

Add their domain (domain.com) to local domain list (Protocols>Domains) and select 'Reject mail from this domain if not sent using TLS'

Outbound:

Created a content policy : If email is sent to one of these domains then Deliver message with TLS and do not verify certificate

Is there a better way of doing this??