I would like if somebody who is familiar with the current status of
thread safety in libressl could chime in. Either have a look at this
(suggested only if you own peril-sensitive sunglasses...) or explain
what does/doesn't need locking as I'm not too sure of how things
ended up after the pledge fixes.