We'll need to extend the TLS interface to provide access to the Finished message and the peer certificate.