Check result of sending STARTTLS before trying to negotiate
tls_client_setup: Always load the CA (if configured)
Resend EHLO after successful TLS negotiation
Make smtp_connect more testing-friendly