Vault: Explicitly default to 3DES CBC
    
    The server-side plugin for IPA Vault relied on the fact that the default
    oid for encryption algorithm is 3DES in CBC mode (DES-EDE3-CBC). Dogtag
    10.4 has changed the default from 3DES to AES. Pass the correct
    algorithm OID to KeyClient.archive_encrypted_data().
    
    Closes: https://pagure.io/freeipa/issue/6899
    Signed-off-by: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>