Add comments & refactor SSLEngine unwrap