Kfsio library: create NetConnection::Filter interface. The primary intention is to allow to plugin [open]ssl socket on top of the os socket. The ssl socket needs to be created some time after the connection start (after kerberos authentication handshake). This requirement is similar to SMTP STARTTLS.