move creating /etc/openssl a bit earlier in smf update to get the password prompt on the start of the process