Fix TLS settings

[fisx]

Currently, the default ciphersuite for TLS connections is not ciphersuite_default, but ciphersuite_all. This is not only surprising, but also insecure and rarely what you want.

This PR fixes this. It is a breaking change, but I think it should be. If you disagree, I would be almost as happy to change this PR to just make ciphersuite_default the default, and leave all the types unchanged. This way library users would get their systems fixed without having to do anything, but it would also make it harder for them to find out what's wrong if they really need ciphersuite_all.

Otherwise a happy user! Thanks for writing this. :-)