Update lib/nssocket.js

1) Using TLS, stream errors such as ECONNREFUSED were not catchable.
2) Connect retries would leak one 'start' listener each retry loop.