use cipher groups instead of hardcoding suites

I wrote a blog post explaining this https://phunehehe.net/openssl-ciphers-forward-secrecy/