[sr-dev] TLS key recommendation