[PULL 26/32] crypto: make TLS credentials structs private