Handle encrypted SNI

Look into ways of MitM-ing SNI encryption. Might need changes to proxy state machine or might be impossible to do with the OpenSSL API. Needs significant research.

Depends on #220 TLS 1.3 (minimal).