Right. I think sticking with the original concept of initializing this once at start up is the better option. The tls.Confing thing must also be changed.