Mention "starttls_required" option in sample configuration file