Cherry-pick of 60e44286fa3c0c0 from master branch does not work due to missing `tls.CipherSuites()` function. We work around by using go build tags for both the building and tests.