disable SSLv3 by default and allow setting raw ssl options