Besides a global Network Interface, each primary only service owns its own network interface. The goal is to change the Network interface to be able to take the transient SSL params. This network interface will be restricted to the primary service that owns it and will not leak to any other invoker. The actual transient params are already declared in the previous code change for the "Multitenant Migrations for Serverless" epic.