Choose a ciphersuite for testing that won't be affected by "no-*" options