client: reject init_client_ssl more than once