I assume this can't be called before `EVP_CipherInit_ex` so we'd only have to set it once?