tls-hkdf: Make labels enum a proper type