Guard SNI usage better (client-side)