openssl: Allow squeezing multiple times from SHAKE128/256 XOFs