tls: Hide backend implementation details from users