Do we want to rely on what $PATH finds for OpenSSL, or should this be configurable?