refactor: put clt&srv ptrs into tcp object
add basic plumbing & first pilot for providing better error messages
commit-fix: last commit introduced a compile problem :-(
make all TLS functions call the user-provided error handler
cleanup