Use ByteBufferList.obtain where applicable in SSL socket. Use static final Empty ByteBuffer for engine requested wraps and unwraps.