openvpn: update cipher string, better explanations