Capture blocking by "TCP works but SSL gets mangled"

We had a user run emma in Belarus, where they had no access to default bridges, and received results that showed no directory authorities, relays, or bridges were being blocked. This could be because emma only performs a TCP connection and the blocking is happening at the TLS layer.

See censorship-analysis#40002 (closed)

Can we expand these tests to capture this behaviour while still keeping the lightweight design?