calomel disables security.ssl3.rsa_rc4_128_sha

when selecting only 256 bit PFS and GCM ciphers