This adds an SSL parameter: 'allow_cname', which can be a string, regexp, or proc, or array of any of the preceding.
This is will be further documented in the future.