Don't allow DSA for TLS 1.3