Disable SHA-2 ciphersuites in < TLS 1.2 connections.