Improve defaults for SSL with varnish