- (dtucker) Enable sha256 kex methods based on the presence of the necessary
   functions, not from the openssl version.