Make SSLProtocol configurable

Given the POODLE attack, it'd be handy if we could
disable SSLv3 without writing a wrapper cookbook