limit ssl debugging to the handshake