tls: Handle transport disconnect during client HS failures