mod_tls: Ban TLS after auth, not before.