set an OPENSSL_API_COMPAT level (#4313)

* set an OPENSSL_API_COMPAT level

this helps prevent adding deprecated functions and will let us see what
we need to/can prune in the distant future when we support only 1.1.0+

* raise the api compat to 1.0.1 (which doesn't matter but is less confusing)
1 file changed