tls: ssl close only after all data drained