pub fn ensure_pq_default_crypto_provider()Expand description
Ensures the process-wide default rustls CryptoProvider prefers the post-quantum
hybrid key exchange X25519MLKEM768, installing aws-lc-rs if no default is set yet.
This sets the key exchange offered by all our outbound TLS — awc (server-to-server
and Yivi) and object_store’s reqwest (the S3 store) — which build their configs
via rustls::ClientConfig::builder. Call it once before any client is built (e.g.
first thing in main): with both the ring and aws_lc_rs providers compiled,
ClientConfig::builder panics unless a default is installed. Idempotent.
§Panics
If the resulting default provider does not prefer X25519MLKEM768.