OpenSSL: discard expired resumption session in client