update what should be safe instead

openssl definitely, others "look" safe