feature: using HsOpenSSL instead of tls