remove dec_resp from handshake_handler return type, because that can only ever happen in response to
a change cipher spec message (which is handled by the ccs_handler)