openssl: tweak keg-only reason