Settle for a higher proto cipher if needed
Settle for a higher proto cipher if needed

This change will have the server fallback to a cipher match that
the client shouldn't support according to their protocol version
if we have no other options. For example, if the only cipher suites a
TLSv1.0 client matches with the server have minimum proto version
TLSv1.2, lets try to negotiate one of those TLSv1.2 ciphers instead
of failing the handshake.

gibson-compsci/s2n,jldodds/s2n,alexeblee/s2n,wcs1only/s2n,bpdavidson/s2n,bpdavidson/s2n,jldodds/s2n,raycoll/s2n,gibson-compsci/s2n,wcs1only/s2n,gibson-compsci/s2n,alexeblee/s2n,colmmacc/s2n,PKRoma/s2n,alexeblee/s2n,PKRoma/s2n,awslabs/s2n,awslabs/s2n,jldodds/s2n,PKRoma/s2n,wcs1only/s2n,PKRoma/s2n,colmmacc/s2n,wcs1only/s2n,PKRoma/s2n,bpdavidson/s2n,wcs1only/s2n,wcs1only/s2n,colmmacc/s2n,PKRoma/s2n,gibson-compsci/s2n,gibson-compsci/s2n,awslabs/s2n,raycoll/s2n,colmmacc/s2n,awslabs/s2n,jldodds/s2n,wcs1only/s2n,raycoll/s2n,alexeblee/s2n,awslabs/s2n,raycoll/s2n,gibson-compsci/s2n,PKRoma/s2n,colmmacc/s2n,raycoll/s2n,bpdavidson/s2n,alexeblee/s2n,alexeblee/s2n,bpdavidson/s2n,colmmacc/s2n,awslabs/s2n,wcs1only/s2n,jldodds/s2n,raycoll/s2n,bpdavidson/s2n,PKRoma/s2n