Instead of having to guess about how to make the TLS stream safe on the given platform, we can use a managed one we implement ourselves and tell libgit2 to use that.