refactor: move to a new "Service" config format

[sbruens]

We introduce a concept of a Service. Services listen on an address and accept a set of ciphers. This generalization allows us to move away from a single port->cipher map, in preparation for adding PROXY support.