Check all known extensions for where they are permitted

[martinthomson]

Apparently, if the server sends a signature_algorithms extension, a mint client will not object.

This can probably be systematic: check extensions by message and object if they are not allowed.