TLS: use Mozilla's recommended cipher list

This was hotfixed on production.