Gotta support old encrypted flag, move cipher spec to middle 3 bits... due to some shortsighted design early-on. In the future this can die once there are no old peers.
But since we are now using middle 3 bits we can assign sane values for the cipher suite enum.