disable SSLv3 by default