Don't modify s->read_ahead in SSL_clear, which is called from