Note: LibreSSL 3.3.3 introduced the --enable-libtls-only build option. Is this fork still needed?
--enable-libtls-only