Why the OpenSSL punycode vulnerability was not detected by fuzz testing (2022)