Don't always try STARTTLS

If STARTTLS isn't advertised and TLS isn't required, we should skip
STARTTLS instead of trying it anyway.