[OSJC-125] exclude DHE (SSL) ciphers when supported keys are <= 1024

does this really need to be public api ?