https-hsts.conf: SSLProtocol: whitelist TLSv* -> blacklist SSLv*

as libraries expand, they'll get TLSv1.3 automatically. https://github.com/ioerror/duraconf/pull/43
Merge pull request #45 from ilf/poodle

https-hsts.conf: SSLProtocol: whitelist TLSv* -> blacklist SSLv*