FIPS module is implicit with kernel FIPS flag
add CMAC selftest for FIPS POST add continuous FIPS entropy test disable non-approved FIPS hashes in the enforced FIPS mode