crypto: lower RSS usage for TLSCallbacks

see #8416
Hm... I think this way is allowed too.