Do we want to try to solve this in this PR? Or is it okay to proceed for now and we can revisit when we add another provider (or during our upcoming discussion about the wisdom of bundling OpenSSL)?