enable zlib again (our new package has the patch)
remove more 128 bit ciphers with no PFS