If an SSLv2 method is explicitly asked for use the SSLv2 cipher string:

assume an application *really* wants SSLv2 if they do that.

Otherwise stick with the default which excludes all SSLv2 cipher suites.