openssl: additional testing

I've pushed a second commit here in the event the maintainers are :-1:
on the sandboxing issues discussed in #34735. Let me know either way,
and I'll either remove the second commit or squash the second into the
first to make it usable for all & acceptable to the maintainers.