This is already documented, I just forgot to include the code :)
Reviewed-by: NViktor Dukhovni <viktor@openssl.org>