libtls: As client, reject DH exchanges using primes smaller than 1024 bit