Use SSL_export_keying_material for TLSv1.2 PRF derivation