when freeing priority_cache make sure it is set to NULL
use a single buffer to generate the client hello.
%COMPAT implies %DUMBFW
doc update
simplified client hello generation
dumbfw extension isn't sent on DTLS
added nettle's suppressions
always set subkey status