It would be tricky to use separate TLS config and TLS logger endpoints. It is easy to use separate TLS config and non-TLS logger plugins.