Refactor tls_client_init interface