[Dovecot] How do I make dovecot not use sslv2 for pop?

[Patrick Horgan]

 From nmap:

995/tcp  open   ssl/pop3   Dovecot pop3d
|_ sslv2: server still supports SSLv2
|_ pop3-capabilities: USER CAPA UIDL PIPELINING RESP-CODES TOP 
SASL(PLAIN LOGIN)

pop3 allows SSLv2, imap doesn't.  In my dovecot.conf I have:

ssl_cipher_list = ALL:!LOW:!SSLv2

at the global level.  Do I need to put it inside the protocol pop3{} 
section?

Patrick