Add @usage nsedoc to UDP scripts (default is missing -sU in this case)
Let sslcert do STARTTLS based on service, not just port number