CHANGES:

• Tls.lwt: make the receive buffer connection-local to avoid potential data races (#422 by @dinosaure)
• Tls_mirage: remove unneeded type alias (@hannesm)
• Add Tls.Config.Ciphers.http2 - a list of ciphersuites allowed to be negotiated for HTTP2 sessions (#423 by @jeffa5)