prefer stronger ciphers