tls: Disable TLS1.1 and CBC cipher suites by default.