tweak stud.conf

best practices as per
https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/