duo_unix: use Homebrew's openssl
duo_unix: sandbox headers

duo_unix installs a pkgconfig file so moving the header directory should
be safe.

Closes #32510.