secio: better handshake log msg
secio: encrypt copy

sadly, encrypting needs to copy, as the user supplied buffer
must not be mangled.