Before, I was afraid to break compatibility for people accustomed to our build systems' default behavior: build with OpenSSL if possible, even on macOS where a better alternative is always available. There's growing pressure to require TLS 1.1, however, which isn't supported by the OpenSSLs that old macOS shipped. Let's switch the default in the CMake build system and make Secure Transport the default on macOS.