[OSJC-125] exclude DHE (SSL) ciphers when supported keys are <= 1024

any reason to change api fields ? (protected are visible in subclasses)