tls/device: Use splice_eof() to flush