more modest progress (still untested) on OpenSSLCryptoStream code