SSL_kKRB5 ciphersuites shouldn't be preferred by default