TLS cipher suites are checked twice