Support AES for KRA archival wrapping
    
    The vault plugin has used TripleDES (des-ede3-cbc) as default wrapping
    algorithm since the plugin was introduced. Allow use of AES-128-CBC as
    alternative wrapping algorithm for transport of secrets.
    
    Fixes: https://pagure.io/freeipa/issue/6524
    
    Signed-off-by: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>