Change record ctors to only allow record-field-assignment expressions.

Previously, any expression that evaluates to a record may have been used
in a record ctor's expression list.  This didn't work in all cases,
doesn't provide any unique functionality that can't be done otherwise,
and is possibly a path to introducing subtle scripting errors.

BIT-1192 #closed
openssl / x509 memory leak issues.

initialization had a small leak (static size), verify had none, ocsp_verify had tons.

I hope this was all...
Update submodules, CHANGES, VERSION.
clean up openssl data structures on exit
Merge branch 'topic/bernhard/x509-memory'

BIT-1193 #merged