Part of the confusion is TLS is not a socket connection, but a protocol on top of
it. So if the TLS session is "shutdown" in the child, it is no longer available in
the parent. However, the channel itself may remain available if tls::unimport is
used instead of close, but the TLS session is itself terminated. This assumes the
other end doesn't close the socket when it receives the close_notify.