server: enable holding back acceptor alerts

[djc]

@howardjohn please take a look if this can address your use case. If so, could you add some test coverage for it?

(I do wonder if at this point it would be easier to just address the non-TLS input case more directly...)

Fixes #146.