Add some very basic handling of TLS_GET_RECORD control mbufs.

For now, it just throws away any that are non-application data.
In the future, this will need to change, but not until TLS1.3, I think?