s4:lib/tls: include a TLS server name indication in the client handshake