- for now disable only SSLv2 by default
(can be enabled via appropriate SSL_CTX_clear_options() call)