session tls: support tls descheduling