Move TLS CCS processing into the state machine