(TK-96) default ssl protocols

This PR changes the default SSL protocols to be TLSv1, TLSv1.1, and TLSv1.2.

Probably easiest to review by commit; the first commit has all the real changes, the other two are just cleanups.
`(into-array String nil)` will product a String[] with no elements, right?  I think the empty arrays would be okay to pass into these two calls.