tls-crypto: Don't filter suites with specific ECDH group if any is available