Only set default DH parameters for server TLS contexts to avoid overhead. See also #663.