When run in FIPS mode, allow vault to fail only when using legacy format