features.h; tls_validate_require_cipher: log flag & tests