stream-tls: add setsockopt() for TLS streams.