- Prevent SSL double-free when individual tunnels are closed
- SSL contexts are managed only at connection level
- Fixes crashes when server closes tunnels