Prefer SHA-256 ciphersuites if using old style PSKs