openssl: always build with EC support