This forces HAProxy to only accept newer versions of TLS, which allows us to meet FedRAMP requirements. Change-Id: I14f4de3875a743ee5328b13668790b26cefd8439 Related-Bug: #1754368