In posttls-finger add protocol and cipher grade selection options.
Leave protocol debug flags active across reconnects, only suppress
redundant logging of the certificate details.
forward_open memory leak on error return
Send SNI even when trying to reuse a session, a new session may be
negotiated anyway.
Avoid local port variable, the port is in state->port which we need
on reconnect.