openssl: change defaults: ENGINE:on, NPN:off, misc