wrap getenv OPENSSL_ALLOW_PROXY_CERTS in an issetugid check, to protect
setuid applications from being fooled.
ok miod
Remove the OPENSSL_*cap getenv's.  A program should not be able to
change the behaviour of the library in such a complicated fashion.
ok miod