code: private ByteBuf allocateOutNetBuf(ChannelHandlerContext ctx, int pendingBytes, int numComponents) {
          return allocate(ctx, engineType.calculateWrapBufferCapacity(this, pendingBytes, numComponents));
      }
docs: Allocates an outbound network buffer for {@link SSLEngine#wrap(ByteBuffer, ByteBuffer)} which can encrypt
  the specified amount of pending bytes.