tls: fix handling of `SNICallback` server option

It shouldn't ignore it!