do not use SSLv3 except explicitely requested