private static int getPRFAlgorithm13(int cipherSuite) {
        return switch (cipherSuite) {
            case CipherSuite.TLS_AES_128_CCM_SHA256,
                    CipherSuite.TLS_AES_128_CCM_8_SHA256,
                    CipherSuite.TLS_AES_128_GCM_SHA256,
                    CipherSuite.TLS_CHACHA20_POLY1305_SHA256 -> PRFAlgorithm.tls13_hkdf_sha256;
            case CipherSuite.TLS_AES_256_GCM_SHA384 -> PRFAlgorithm.tls13_hkdf_sha384;
            case CipherSuite.TLS_SM4_CCM_SM3, CipherSuite.TLS_SM4_GCM_SM3 -> PRFAlgorithm.tls13_hkdf_sm3;
            default -> -1;
        };
    }
TODO: Ask BC folks to see if getExternalPSK can throw a checked exception
https://github.com/bcgit/bc-java/issues/1673
We are using SneakyThrows here because getExternalPSK is an override and we cant have throws in the method signature
and we dont want to catch and wrap in RuntimeException.
SneakyThrows allows up to compile and it will throw the exception at runtime.
zuul-core/src/main/java/com/netflix/zuul/netty/server/psk/ZuulPskServer.java