code: func (s *DefaultService) TLSConfig(hostname string) (*tls.Config, error) {
  	s.mu.Lock()
  	defer s.mu.Unlock()
  
  	return newTLSConfig(hostname, isSecureIndex(s.config, hostname))
  }
docs: // TLSConfig constructs a client TLS configuration based on server defaults