Client lib: always run write append recovery with ssl on if security / authentication enabled to simplify the logic, and get rid of extra round trip to shutdown ssl.