afclient: make "SERVER SSL" log show which protocol version is in use, if any

(rather than just "yes")