You want to know how to configure tls encryption such that it is mandatory for some domains and optional for others.
This can be configured within the control center by going to the domain configuration screen under the protocol tab and defining the tls configuration options under the delivery tab for the specific domains you want.