when to free tls config?

[Ted Unangst]

It's unfortunately unclear from the documentation when it is safe to call
tls_config_free(). One might naively assume after a call to tls_configure, but
that's not correct as the config is also accessed during connect.