bug 1288: Accept STARTTLS as last option