client: mitigate renegotiation attack