More ssl_session_dup fixes