document missing feature; avoid the risk of returning argv in an inconsistent state when an error occurs

"manage" remains undocumented (and unimplemented).

use asynchronous Start TLS exop; allow propagating TLS if used in the original connection; minor cleanup