fix CAPWAP preamble for encrypted packets

When encrypting, only the external CAPWAP preamble has the
DTLS flag set. The inner CAPWAP message alsways has Type = 0
update OpenSSL cipher suites and enable PSK