Always free sock->ssn for TLS listeners