Implement SSL downgrade on the native SSL socket

The new SSL socket implementation (the non-libevent one) does not currently implement the SSL downgrade hack. We could probably use peek to achieve the same result, or modify our socket BIO to look at the first few bytes.