beginnings of full TLS support in shared libraries