Require on-the-wire SNI to pass IsValidSNI check This requirement existed in QUIC Crypto; it should exist when we run QUIC with TLS. Restrict sni in ietf quic draft versions. protected by reloadable flag quic_tls_enforce_valid_sni. PiperOrigin-RevId: 310054163 Change-Id: I9ffdea55c350e9c1592a71debb3fbb271eca7750