Currently ktls-utils 1.0-rc1 translates a -ETIMEDOUT return from GnuTLS to -EACCES when responding to the kernel's upcall to create a handshake.  This can cause the kernel to unexpectedly set -EACCES on the file mapping's error if in writeback.  Instead, we'd like to see https://github.com/oracle/ktls-utils/pull/84 included in RHEL and backported to RHEL-9.4.z to support NetApp/SAP TLS certification.