Packet validation

the interop tests run through ; furthermore this fixes the config.require_secure_rekeying (which I broke earlier today, where our client accepted servers which do not carry a secure renegotiation extension with them)