custom cipher spec s2s out