to EVP any more. Move locking #define into fips.h. Set FIPS locking callbacks at same time as OpenSSL locking callbacks.
redirect locking to minimal FIPS_lock() function where required.