openssl: Properly handle flags in key usage extension