ssh/config: Use AES256-GCM to mitigate Terrapin