The server is unwilling to risk processing a request that might be replayed.
Returned to reject TLS early-data requests that could be replayed.