tls-peer: Derive application traffic keys after server finished message