Add OPENSSL_cleanup to tls_shutdown function (9.16)

This prevents a direct leak in OPENSSL_init_crypto (called from OPENSSL_init_ssl).

Add shim version of OPENSSL_cleanup because it is missing in LibreSSL on OpenBSD.

(cherry picked from commit 89f4f8f0)