Last plumbing -- termination of testcli/testsrv is now immediate too.
The next step up is adding the actual TLS negotiations before+in copycat.