If we error out here tls->key will be uninitialized, leading to the scan-build warning below. Using SCCalloc or a memset after the SCMalloc will fix this.