accept the socket connection, start a worker, do the ssl

prevents waiting on the ssl handshake to complete to start a new
accept worker. this can prevent temporary starvation of the connect pool
if a large number of ssl connections start (relative to the connect pool)
due to the time it takes to initiate ssl.