more secure ssl settings, when available