Do most of managed-mode initialization on setup().
Set decryptedTicket even if we are a client (and leave it unused).
Clarify the shared-secret initialization in __init__().
Don't pass TransportConfig to the __init__().