Fix client SSL support.

This is a first draft only; while it works, the implementation is not
great.  The SSL code should be split out into a uv stream wrapper that
can be used for both servers and clients.
Free client->cl_ssl.
Correctly call SSL_shutdown() when draining client.