chardev: tcp: postpone TLS work until machine done