SPIFFE validator + "mtls_authenticated" do not support session resumption

On a resumed session, "peer certificate validated" is set to `false` since that bit is cert by the validator flow per connection. That means any policy using `mtls_authenticated` evaluates to `false`, and can be dangerous if used as a DENY policy. The workaround is to disable session resumption in TLS.