Apache security: disable RC4 ciphers, non-TLS protocols