This could cause the client to think that there is a certificate
mismatch if there is a pinned certificate for this host already
and we then connect to an unecrypted ws socket.
Also, disconnect clients before raising the certificate mismatch
error in case a client implementation would just ignore this
and reconnect syncronously right way.