move CipherRequires() to both client and server, VerifyClientSuite() to client only