openssl: abstract ex_data machine to work for more types, keep and clean global refs
openssl: only spend one native callback for all possible session handlers