dma: always send EHLO after tls setup