IPsec: Mark MODP<=1024 and MD5 as broken and SHA1 as weak