ipatests: fix healthcheck test for ipahealthcheck.ds.encryption
    
    389ds is combining the value set in dse.ldif and the current crypto
    policy to evaluate the min TLS version that it will be using.
    The test needs to change the crypto policy to LEGACY in order to allow
    TLS 1.0, because the DEFAULT policy prevents TLS 1.0 on fc33+.
    
    Fixes: https://pagure.io/freeipa/issue/8670
    
    Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
    Reviewed-By: Kaleemullah Siddiqui <ksiddiqu@redhat.com>