AST-2016-001 TLS defaults to mitigate BEAST
AST-2016-002 Fix fd leak with non-default timert1
AST-2016-003 Remote crash in UDPTL

This also removes the security patch mechanism, upstream seems
to change the format of these patches on every security release
so just grab the tarball.

(cherry picked from commit 63aa35aa)