A tls.Config must have Certificates or GetCertificate set, in order to
be accepted by tls.Listen and quic.Listen.