Resending handshake frames

[martinthomson]

-recovery says this:

Handshake frames may be cancelled by handshake state transitions. In
particular, all non-protected frames SHOULD be no longer be transmitted once
packet protection is available.

This is not entirely true. A client might have (1-RTT) packet protection keys, but it still needs to retransmit its Finished (and Certificate), which are protected with the static keys.