FIPS module is implicit with kernel FIPS flag
make only_urandom a default in non-presence of configuration file run the full FIPS selftests only when the library is called from application