someone appears to be tampering with gitlab.com TLS streams, getting TLS read errors ("decryption failes or bad record mac" in ssl3_get_record when using wget).