Use a reserved value for ssl refno to indicate that a handshake is in progress.

This is needed so clnt_vc_destroy() will not do a soclose() on the socket,
since the daemon may still be in SSL_connect().