Don't use SSLv2 compatible client hello if we don't tolerate legacy renegotiation