connection: Correctly handle IAC doubling inside subnegotiation