Slay the BEAST

http://rud.is/b/2012/04/28/slaying-the-beast-in-nginx/

Assigning to @stuartf 

Would be good to apply this in puppet and give it a whirl in qa1. What we're looking for is:

* The Qualsys test identifies that we're no longer vulnerable
* SSL still works as expected in IE, FireFox, Chrome, Safari
* The SSL decryption time hasn't drastically increased. Currently (according to our Circonus pings) our SSL time is roughly 400ms. A comparison before and after would be necessary