Rate-limit connection attempts for "down" home servers

To only once per second.
Open SSL sockets only if we have a valid FD
Regularize error message for proxy_new_listener