bug 969479 - only prevent TLS fallback for STARTTLS r=briansmith