bluemote/https: enable HSTS
bluemote ssl: choose optimal cipher suites