WIP: ssl_fingerprint etc
1.967: new option SSL_fingerprint, default scheme for verifying names, ...