Only use TLS v1, v1.1, v1.2 (never allow SSL 3.0)