Older releases of cfengine do not support openssl111 which is now in
HEAD. Mark cfengine 3.11 and older broken under HEAD. Deprecate
and expire the older cfengine ports when FreeBSD 11 is EOL.
Users are encouraged to upgrade to cfengine 3.12 (sysutils/cfengine312)
as soon as conveinent or when using cfengine on FreeBSD 12 and newer.
The default cfengine was recently changed to cfengine312.