use client version when eliminating TLS v1.2 ciphersuites in client hello