New OpenSSL features relying on changes in module files must account for locked FIPS versions of those files