Allow RC4 by default, as a last resort

IMHO better compromise between security and usability; still can be
overridden in TLS_INTERPOSER_CIPHERS