Switch security/sslscan to the official way for handling "GitHub release
plus upstream patches", as documented in the Porter's Handbook, ex 5.14.

Reported by: mat
Reviewed by: mat
Approved by: mat