Update CHANGES with details of TLSv1.3 ciphersuite configuration