Mitigate client-initiated SSL renegotiation DoS