Update cipher guidance to reflect modern TLS best practices (#2207)