Added allowlegacyconnects and protocol_version

They are commented out so that CFEngine 3.6 is compatible by default to
old installations.
Clarify trustkeysfrom.