move websocket specific crypto arm-twisting into websocket lib