Sadly, puppetlabs/apache doesn't let you globally set ssl_protocol

*sigh*