Set SSL options to sane default and enfore server cipher preferences

Original PR #856