add SSL_OP_SINGLE_(DH|ECDH)_USE to default options to increase PFS security
call it 2.001