Separated SslStream creation for client and server, since only client needs to validate remote certificate