enforced default configuration for HTTPS ciphers