Expose specifying SSL cipher suite list.
Fix up tests.

Most of the should_not_receive calls should not have been passed a
with(), since that's not what they were intended to test.