with the alpn moved to tarp/2, a client and a tarp/1 daemon failed in the tls handshake, before the hello, so the user got a connect error instead of the version mismatch.
the client also offers tarp/1 and the daemon also accepts it, so the hello goes through and the version check answers.