remove STARTTLS capability if no certificates in config
fix bug #1029 for SSL/TLS as well