Treat tls.tcl.h as a normal file and always regenerate it, and never distribute it -- end users will need "od" to create it