> I am pretty conservative on these usually but I think opt-out would be OK.
I am not even sure opt-out makes sense vs. just moving the directives not expected to be used. I guess some obscure config could reach the same VH over a non-SNI alternate address AND different protocols are desired? Seems pretty unlikely.
