Please document the partition reassignment with TLS authentication (production or 3rd party environment only provide that kind of listener config). As a starter, you may want to look at the following solution which describes a more specific use case.

https://access.redhat.com/solutions/6152852