scan: check for secure renegotiation