expanded scope of the handshake locks in SSLHandler to avoid possible negotiation after the first SSLEngine wrap