Wrap tls sockets on a per client basis