easyrsa_openssl(): Move run-control to functions easyrsa_rewrite_ssl_config() and escape_hazard(). Replaces complex control code in easyrsa_openssl(). Run-control supports: * EASYRSA_FORCE_SAFE_SSL: --force-safe-ssl, ALWAYS run. * EASYRSA_NO_SAFE_SSL: --no-safe-ssl, NEVER run. * Run-once: Default, run-once only. Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>