openssl: check conf file exists; tweak sandboxing/handling of
the etc directory and files within.

Closes #34728.