mod_tls: Mark session as not secure before negotiating TLS