Allow global setting of ssl_protocol + doc. ssl_cipher

ssl_protocol is setable per vhost already, this makes it an option
that can be sent once per the entire configuration instead of per
each vhost.

Also include at least a line on the README on both the recently
added global ssl_cipher and this new ssl_protocol parameters.