TLSA records exist, but are for the entire server rather than a single binary or script.