nginx: don't use SSLv3