Update default SSL cipher spec (RIPD-108)

This changes the default list of ciphers we accept. It should be fine and not cause interoperability problems, but it should be validated nonetheless.

Here's the list of ciphers that `s1` allows currently:

    ADH-AES256-GCM-SHA384
    ADH-AES256-SHA256
    ADH-AES256-SHA
    ADH-CAMELLIA256-SHA
    ADH-DES-CBC3-SHA
    ADH-AES128-GCM-SHA256
    ADH-AES128-SHA256
    ADH-AES128-SHA
    ADH-SEED-SHA
    ADH-CAMELLIA128-SHA

Here's the list with this applied:

    ADH-AES256-GCM-SHA384
    ADH-AES256-SHA256 
    ADH-AES128-GCM-SHA256
    ADH-AES128-SHA256