Kfsio lib: ensure that ssl filter read and write methods call only SSL_shutdown if shutdown initiated, detach filter from connection object once ssl shutdown completes successfully.
Chunk server: client protocol state machine: implement [ssl} filter shutdown with the intention to use it after successful PSK handshake if the client and meta server decides / allow clear test communication. Start on authentication context implementation / connection filter setup in acceptor.