Don't configure disabled krb5 enctypes in FIPS mode
    
    The only permitted ciphers are the AES family (called aes, which
    is the combination of: aes256-cts-hmac-sha1-96,
    aes128-cts-hmac-sha1-96, aes256-cts-hmac-sha384-192, and
    aes128-cts-hmac-sha256-128).
    
    DES, RC4, and Camellia are not permitted in FIPS mode.  While 3DES
    is permitted, the KDF used for it in krb5 is not, and Microsoft
    doesn't implement 3DES anyway.
    
    This is only applied on new installations because we don't
    allow converting a non-FIPS install into a FIPS one.
    
    Reviewed-By: Robbie Harwood <rharwood@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>