Many TCP streams share a circuit

Previous designs built a new circuit for each stream

lots of public key ops per request
plus anonymity dangers from making so many circuits