instead of the one-file-per-OS approach that libressl takes. The fallback code does not have as many OS-specific bits as libressl.