Use only strong cipher suites; keep using compression for compatibility with stock 3.4.2