Never expose ssl->bbio in the public API.