doc: document why SSL2/SSL3 is disabled