clarify SSLProtocol settings. Be restrictive.