TLSv1.3: additional checks in SSL_set_record_padding_callback