[OSJC-125] exclude DHE (SSL) ciphers when supported keys are <= 1024

should this not *only* be added if certificate needs to rewired ?