Make UNRESTRICTED_SERVER_CIPHER_LIST non-stupid

This is a parent ticket for the sub-tickets we've accumulated about fixing our the list of ciphersuites that servers prefer and pick from.