tls_process_server_hello: Disallow repeated HRR