While it's a bit sketchier than tls-server-end-point, it is supported on the backend with all OpenSSL versions.