client: flush buffered SSL output when tearing down client ustream