New option SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS for disabling CBC