doc: Clarify that calling SSL_set_session(ssl, NULL) is a correct use case.