Add option to reject unauthenticated ciphers