don't send IP addresses as TLS SNI host name