use -maes if AES-NI detected
don't try to connect to unreachable router from unreachable router