Making the default ssl_protocol configurable, and turning off SSLv3 by default