PR 2938 hardens tls though there are other places that uses TLS
as well and setTLSDefaults are not invoked in other paths.

This PR hardens tls on all places.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>