add mozilla ssl recommendations, make cipher string customizable