I really like the support for tls in syslogd. Unfortunately it looks like it is not yet supported server-side. At least in current, syslog.conf(5) doesn't mention anything about specifying a private key.