use runtime TlsProvider in tcp-hook example

followup to !349 (merged) and !341 (merged)

Do we still want Tls providers to be public? I believe so, but it's no longer needed for the example to work