openssl: opt-out of lto usage