WebSocket host-meta tests use wildcard cert, revert after complete TLS name validation is implemented