Need to allow AES w/CBC else some things get annoyed