Don't use OpenSSL SSHA1

because of EAP-SIM fips186 code.

hostap seems to do this a lot more cleanly