tweak SSL detection heuristics