mutt: don't use SSLv3