Explicitly disallow DSA for TLS 1.3