openssl: add option to disable PSK support