Raise an explicit BackendError on TLS failures

In turn, this makes for much more useful tracebacks on subsequent
_create_connector failures.