Disallowing all *DES* instead of only *3DES*. Too unsafe.