client: only try to create wrapper SSL stream if base_stream is valid.

This fixes a bug where the method guards would protect against the
creation of the wrapper stream. It can be verified with:

./example-client 'mongodb://invalid-hostname/?ssl=true'