Send a CCS after ServerHello in TLSv1.3 if using middlebox compat mode