This API is explicitly intended to prevent the user from shooting themself in the foot. Note that you also can't specify TLS or SSL versions to support or cipher suites. Later we'll probably need a lower level API that allows specifying these things for more advanced users, but it should not be in the same module.