tls-hkdf: Add helper method to allocate data from the internal PRF