The default I've chosen is simply the default value for `mod_ssl`, so that when it matches what's in the template, no line is written.