TLS: check negotiated protocol and disconnect if it's not http2