Disable GSSAPIKeyExchange

Unfortunately, it seems to have security problems with hostname canonicalization for which we currently have no mitigation mechanism.