Prohibit {client,server}_version {03,00}.

To prohibit SSLv3 being negotiated, the client_version and
server_version in the ClientHello and ServerHello must not be {03,00}.
The record layer version can still follow the advice in Appendix E of
RCF5246.