moved some options to main.cf, enabled high cipher list by default now