Override default ciphers if they appear insecure.
Add tests around SSL cipher defaults behavior.
Test that OpenSSL constants have expected values.
Check at runtime that VERIFY_PEER != VERIFY_NONE.

It looks like a lot of projects override VERIFY_PEER to equal
VERIFY_NONE, which we'd like to discourage.

https://github.com/search?l=ruby&q=OpenSSL%3A%3ASSL%3A%3AVERIFY_NONE&ref=cmdform&type=Code