tls: pass session state to engine on client init