Package-level declarations

One accepted socket, already past the TLS handshake setup when the listener is TLS.

Everything drift serve needs from the operating system.

PEM files; the key is PKCS#8 on the JVM and anything OpenSSL reads on native.