opportunistic email encryption by the MTA (not MUA)