1 - fix STARTTLS timeouts by setting socket timings
2 possibly using a different structure than an int to save the fd
3 and SSL context -- and then also timeout?
4 Or just make set_timeout take an optional fd, which, when != -1,
5 also sets the socket timeouts?
7 - make SSLv2 removal dependent on openssl configuration
8 (see Debian FTBFS bug for how to detect that in configure)
10 - make --with-ssl default?