add OpenSSL RAND_cleanup() on OpenSSL shutdown

- to securely erase the memory used by the PNRG
- also rework 2 comments in OpenSSL init
Merge pull request #4401

cf04d83 add OpenSSL RAND_cleanup() on OpenSSL shutdown (Philip Kaufmann)