When SSL is in use, the 1130 Host is not allowed to connect is sent in clear text, causing SSL: WRONG_VERSION_NUMBER in clients

When a client connects to server and the following conditions are true:

• client uses SSL
• the user is non existing on server
• there are no other users on server that match the source IP in their host entry

then the 1130 Host is not allowed to connect error is sent in clear text, disrupting the SSL session (client gets SSL: WRONG_VERSION_NUMBER); furthermore, nothing is logged in logs with log_warnings=2.

The SSL handshake should be completed BEFORE this check is done, so that a proper error message can be returned (and logged).