server: minor cleanup

twisted.internet.ssl.CertificateOptions (used by endpoints api) indeed
does ctx.set_options(SSL.OP_NO_SSLv2) as a first thing after ctx init.
server: consolidate some redundant submodules