[Dovecot] How do I make dovecot not use sslv2 for pop?

From nmap:

995/tcp open ssl/pop3 Dovecot pop3d |_ sslv2: server still supports SSLv2 |_ pop3-capabilities: USER CAPA UIDL PIPELINING RESP-CODES TOP SASL(PLAIN LOGIN)

pop3 allows SSLv2, imap doesn't. In my dovecot.conf I have:

ssl_cipher_list = ALL:!LOW:!SSLv2

at the global level. Do I need to put it inside the protocol pop3{} section?

Patrick