use safe primes in ssl_get_auto_dh()