It would be good to use a design of the features similar to axum-server, i.e.:
tls-rustls = ["tls-rustls-no-provider", "rustls/aws-lc-rs"]
tls-rustls-no-provider = [...]
This would make it easier to forward these options down the chain of dependencies.