(Only for discussion) +str #15402 SSL support for streams (working for happy case)

This is only mean for discussing naming and getting some feedback on the code so far
this buffer should probably be kept private to `doWrap/doUnwrap`, it is not used anywhere else; passing it into these methods would only make sense if there is also something else that is sometimes needed