Narrow the scope of local variables in tls_construct_client_key_exchange()