set a few more SSL settings (defaults don't seem to do the trick)