Default to TLSv1 without SSLv{2,3}.

Expand the layer SSL syntax to support <type>:<support>
ala. "tlsv1:all,!sslv2,!sslv3"