GSASL channel-binding: TLS resumption checks