- protocol w/o cipher (only SSLv2 so far)
- for EVERY protocol now check whether $openssl supports it
- better fail for PFS if there are no local ciphers
- protocol check stream lined: similar now for every protocol
- NPN/SPDY is not green anymore