Bitrot: Arrange for shared keys in SMTP server session tickets.

Otherwise, with clients that enable session tickets, the SMTP session
cache is per-process and largely ineffective.  Older releases should
add SSL_OP_NO_TICKET to SSL options bit mask in the SMTP server only.

The session ticket key validity interval (sum of initial issuing
and retired key validation intervals) must not exceed the SSL session
lifetime.  Otherwise, clients may send valid tickets for expired
sessions, which the OpenSSL server code mishandles (does not send
a replacement ticket, patch pending...).

We set the session lifetime to 3 times the cache lifetime (external
cache) which is also the ticket issuing and retired validation
lifetime, so ticketed sessions last a uniformly distributed multiple
of between 1 to 2 times the configured session lifetime.