Make the TLSv1.3 downgrade mechanism a configurable option