only merge HANDSHAKE frames - alerts and change cipher spec are rare enough that

it does not pay off. empty APPLICATION_DATA (at least in TLS_1_0) frames are crucial
(against BEAST).