Don't attempt to use GNUTLS >= 2.6, as it is known broken with the socket-tls backend.