ktls: Reject some invalid cipher suites.

• Reject AES-CBC cipher suites for TLS 1.0 and TLS 1.1 using auth algorithms other than SHA1-HMAC.

• Reject AES-GCM cipher suites for TLS versions older than 1.2.

Reviewed by: markj
Sponsored by: Netflix
Differential Revision: https://reviews.freebsd.org/D32842

(cherry picked from commit 900a28fe33ef998aaee55cb243f4efa35471da07)