pyopenssl 20.0.1 requires cryptography 3.2...

Also add a test for openssl runtime version matching packaging version

actually, test fails, so it demonstrates we don't

not yet built locally because slow networks and computers and such
let's see what CI does with it

... so we can actually catch the boot loader menu from IPMI on the first try.
Resolving privatestorage/privatestorageops#329 .

Re-importing the path probably breaks other stuff.  Anyway, we only have one
overlay now so this short/simpler thing works.

Rely on upstream package to supply typing and challenge-bypass-ristretto as
necessary.  Simplify our expression (approximately pointfree style) so we
don't have to know about any other arguments that might be passed or accepted.