Tweak the check that a ciphersuite has not changed since the HRR