Change SSLHAF_RAW to include the entire record layer, not just Client Hello.