Disable SSLv2/v3 to avoid POODLE weakness (CVE-2014-3566)

Also set a more sane default set of ciphers to enable.