crypto: lower RSS usage for TLSCallbacks

see #8416
style?
```cpp
explicit Buffer(size_t len)
    : read_pos_(0),
      write_pos_(0),
      len_(len),
      next_(NULL) {
```

I'm just not sure what `cpplint` will accept.