Split up STARTTLS into STARTTLS (Optional) and STARTTLS (Required). Also added option to force authenticating users to use a SSL/TLS channel.