add more secure ssl defaults