Update default SSL cipher spec (RIPD-108)

This changes the default list of ciphers we accept. It should be fine and not cause interoperability problems, but it should be validated nonetheless.