Switch to AES-256-CBC for better compatability
Hardcode what ciphers we'l use to ensure PFS
Enable the use of the tls-auth key