DoH resolver: try resolving other candidates on “domain not found” error (same behaviour as with native resolver).
Allow HTTP/2 connections to exit cleanly when TLS session gets corrupted and termination handshake can’t be performed.