sthen@ and ajacoutot@ suggested to hook up this flavor, but I'd feel better is we first updated our mbedtls port (mbedtls-2.6.0 doesn't build out of the box).