Refactor TLS-PRF's kdf_tls1_prf_mkmacctx() to a provider utility