mbedtls: sync with polarssl config