ship with more sane ciphers as the default