tls-hkdf: Handle label expansion inside expand_label()