TCPClient: Use TLS1.1+ where available, BaseHandler: disable SSLv2