Switch from SMTP+STARTTLS on port 587 to SMTPS on port 465

A good argument for using 465 is made at
https://www.agwa.name/blog/post/starttls_considered_harmful.

FastMail make a good case at
https://www.fastmail.fm/help/technical/ssltlsstarttls.html.
(https://www.fastmail.fm/help/technical/servernamesandports.html states that
587 is available but they do seem to recommend 465).

Gmail uses 465 too.

This shouldn't stop opportunistic TLS being used for incoming mail because
STARTTLS remains available on port 25 - which is what would have been used
before too.

Backward compatibility with clients that were setup to use 587 on existing
installations is maintained because we only change the setup to enable 465
 - we don't disable any existing SMTP+STARTTLS configuration.