Split out the PSK preamble from tls_process_key_exchange()