Start changelog.
Require buffer inputs w/cipher APIs.

- Also fix tls.connected callback call time, ensure it is
  called prior to tls.dataReady by calling prior to flushing
  finished record.