Slightly abstract ktls_start() to reduce OS-specific #ifdefs.