Upgrade OpenSSL, and use ONBUILD to always install security updates downstream