diff --git a/internal/authclient/config.go b/internal/authclient/config.go
index f61d5674f..b272e8523 100644
--- a/internal/authclient/config.go
+++ b/internal/authclient/config.go
@@ -22,6 +22,6 @@ type Option func(*config)
 // WithTLSConfig returns an option to configure the tls config.
 func WithTLSConfig(tlsConfig *tls.Config) Option {
 	return func(cfg *config) {
-		cfg.tlsConfig = tlsConfig
+		cfg.tlsConfig = tlsConfig.Clone()
 	}
 }