disallow basic server fast forwards during handshake