gsi: reject SSL records with jumbo frames