openssl: re-enable NPN by default