Please review: [389 Project] #47838: harden the list of ciphers available by default