lazily initalize TLS block on first access

This will allow to redo #456 correctly.