Evaluate non-C tor implementations for hackability

For testing, we should have badly-behaved clients and servers. But implementing that in C seems like horrible overkill. Let's look at the best-of-breed compatible implementations, and figure out which one would be the best basis for making a bunch of stub test client/servers.

(It's okay if the client answer and the server answer aren't the same)