Don't decrease tls.min setting if it's > 1.

Fixes issues raised in #674.