Reject SSL handshake for unknown SNI for panel and subscription ports

[pulsarice]

Is your feature request related to a problem? Please describe.
When the panel is set to listen on a specific Domain, if we use this command curl https://panelIP:panelPort -Ivk we will see the certificate CN that was used on the panel.
An attacker could use the certificate CN as SNI to try to connect to server.

Describe the solution you'd like
Like xray-core's rejectUnknownSni feature, I think It would be better:
When the panel is set to listen on a specific Domain, if the SNI does not match the domain specified, the server would reject TLS handshakes altogether and would not announce the certificate CN specified on server.
something like nginx's ssl_reject_handshake directive.

[alireza0]

Good idea in case of security.

[alireza0]

It avoid access to the panel if admin want to use self signed certificate or same.
It is better to make it optional which takes more time.
I am going to work on it in proper time