Investigate using a single FD

[djwatson]

More feedback from netdev1.2:

Investigate using a single FD. Either a sockopt to switch between encrypted / unencrypted mode, or a special return code like we're using now, or maybe investigate using TCP urgent pointer. A single FD would be useful to both 1) reduce fd resource usage and 2) Help hardware offloads deal with control messages