use cipher groups instead of hardcoding suites