Call client-side callback `LocalCertificateSelectionCallback` before handshake -- as a workaround of #65439