check (apparent) DH group size
handle nocrypto refusing DH kex
remove DH->Sexp stubs
Merge pull request #136 from mirleft/dh-checks

Dh checks
select a supported protocol version and ciphersuite by random