tls_wrap: bump kClearOutChunkSize to 16kb