TWRP 3.3.1-2

No actual changes to the recovery source itself here, but there was an issue with boringssl that was preventing decryption. This has been patched and I'll push the fix to the TWRP source at some point. This does not fix the issue with the Lineage OTA not installing when the device is unencrypted, but I don't know that it's a TWRP issue since it doesn't work correctly with Lineage Recovery either.