openssl: Don't propose too weak ciphers.
openssl-compat: Enable cryptodev again.

This is compiled in and therefore not an externally loadable
engine.