I love this idea, but since `handle_accept` and `_accept_subprocess` have almost identical logic, I think it would be good to refactor them to use the same code. Perhaps a shared helper that both use for creating the channel, and wrapping the socket with SSL?