TLS trunk not disconnecting if exension hangs up first

I cant really sell them on a man in the middle concept without poof of what they are doing wrong. How can I prove to them what is wrong?

For those new to this very long thread, here is a visual on what is happening;