the pkg creation options should be flexible and have evolved over time. Originally the TLS plugins weren't there so filesystem-based configuration was the only way.