diff --git a/migration/options.c b/migration/options.c
index b5d4ebe..014aecc 100644
--- a/migration/options.c
+++ b/migration/options.c
@@ -582,6 +582,13 @@
     return s->parameters.throttle_trigger_threshold;
 }
 
+const char *migrate_tls_authz(void)
+{
+    MigrationState *s = migrate_get_current();
+
+    return s->parameters.tls_authz;
+}
+
 const char *migrate_tls_creds(void)
 {
     MigrationState *s = migrate_get_current();
diff --git a/migration/options.h b/migration/options.h
index 4603ac9..987e639 100644
--- a/migration/options.h
+++ b/migration/options.h
@@ -80,6 +80,7 @@
 int migrate_multifd_zlib_level(void);
 int migrate_multifd_zstd_level(void);
 uint8_t migrate_throttle_trigger_threshold(void);
+const char *migrate_tls_authz(void);
 const char *migrate_tls_creds(void);
 uint64_t migrate_xbzrle_cache_size(void);
 
diff --git a/migration/tls.c b/migration/tls.c
index 6e70887..184db4d 100644
--- a/migration/tls.c
+++ b/migration/tls.c
@@ -86,10 +86,7 @@
         return;
     }
 
-    tioc = qio_channel_tls_new_server(
-        ioc, creds,
-        s->parameters.tls_authz,
-        errp);
+    tioc = qio_channel_tls_new_server(ioc, creds, migrate_tls_authz(), errp);
     if (!tioc) {
         return;
     }