= io: improve SSL closing sequence, fixes #393

Changes:
  * when user wants to close connection, don't do so immediately but
    let SSLEngine drive the decision (encrypt -> CLOSED)
  * also when peer closes connection on SSL level (decrypt -> CLOSED),
    don't warn (and close underlying transport) but follow the usual
    connection closing path