crypto/openssl: init GCM key at session creation