The *-rollback aren't used.  So we delete them
Allow begin/commit to be silently empty
Use talloc, not malloc

for packet->data
and talloc_steal the SSL session, so that it's parented
off of the socket, and not off of the CONF_SECTION
Steal the SSL session pointer

so it's attached to the handle, and not to the CONF_SECTION