Restrict TLS to v.1 and allow only TLS ciphers

r+'s by ulfr
@kitcambridge r? to make sure that i got all the TLS config points.

```
09:17 < ulfr> jrconlin: the cipher thing should be easy enough:
              config.MinVersion = 0x0301 and config.CipherSuites =
              [...]uint16{0xc02f, 0xc02b, 0xc013, 0xc014, 0xc00a, 0xc009,
              0x002f, 0x0035, 0xc012, 0x000a}
09:17 < jrconlin> jbonacci: I did, I even brought along some friends to help
                  swear.
09:18 < jrconlin> ulfr: thanks, I'll see about adding those.
09:18 < ulfr> I'm testing locally to make sure the ciphersuite works
09:18 < jrconlin> cool.
09:35 < jrconlin> ulfr: will probably use config.MinVersion=tls.VersionTLS10;
                  it's better being readable.
09:45 < jrconlin> also spelling out the ciphers.
10:04 < ulfr> jrconlin: https://linuxwall.info/p/pbUf
10:04 < ulfr> jrconlin: there's also a boolean to set to prefer the server
              ordering, see line 42
10:05 < jrconlin> ulfr: yeah, noticed that when I was digging through the tls
                  stuff.
10:05 < jrconlin> May I ask why you're appending the extra ciphers rather than
                  specifying them in the config?
10:06 < ulfr> jrconlin: quickndirty code written during meetings :p
10:06 < jrconlin> gotcha.
10:08 < jrconlin> ulfr: will apply the following:
                  http://pastebin.mozilla.org/6799504 r?
10:12 < ulfr> jrconlin: r+ https://linuxwall.info/p/F58z
```