Don't modify global OpenSSL OID table in PKINIT

These commits solve part of the problem with PKINIT thread safety and application friendliness.  The problem is described here: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7889