Make 'device crypto' lines more consistent.

• In configurations with a pseudo devices section, move 'device crypto' into that section.
• Use a consistent comment. Note that other things common in kernel configs such as GELI also require 'device crypto', not just IPSEC.

Reviewed by: rgrimes, cem, imp
Differential Revision: https://reviews.freebsd.org/D16775