1) Enable SSL_MODE_RELEASE_BUFFERS to save 32k per idel ssl connection per openssl doc 2) remove extraneous option which is superseded by OP_ALL