Instead, provide git_tls_stream_new() to ask for the most appropriate encrypted stream and use it in our HTTP transport.