[WO-421] Expose socket.oncert

... to accomodate changes in tcp-socket
whiteout-io/tcp-socket#2

Also, login with listening client only when needed