add the option to restrict the TLS versions and cipher suites