Reduce stack usage in tls13_hkdf_expand