Config option to force use of PFS ciphers