openssl: add config option for no_hw support