Make the nonstandard "des-cbc" cipher disabled by default