SECLUDIT: No SSL/TLS Compression specification (disable to avoid SSL/TLS CRIME)
  - Add a profile option to disable SSL compression with default set to disable
  - Add a call to SSL_CTX_set_options() with SSL_OP_NO_COMPRESSION for disabling SSL compression
SECLUDIT: Ensure the PRNG has been seed with enough randomness
  - Check return code of RAND_bytes()
  - Call RAND_poll() upon initialisation
NB: RAND_poll() calls /dev/urandom on unix-like system. If we detect a lack of entropy we can reseed using RAND_load_file() and /dev/random.