not as template, was thinking along the lines of eg update-alternatives to source a file from ssl-global with the cipher settings