Set s->read_ahead in SSL_new because SSL_clear no longer modifies it.