Detection of encrypted streams for egress monitoring