rename rekey -> reneg

also, swap order of tls_versions (min, max) instead of (max, min)