openssl: add option for NPN support