Optimizing post-quantum TLS on embedded clients