don't prematurely shut down socket -- use SSL_shutdown