tls: rx: use async as an in-out argument