Updates following review of SSL_stateless() code