drop-in replacement for IO::Socket::SSL