ZFS: whitelist zstd and encryption in the loader

MFC r364787:
MFS r366593:

Please note that neither zstd nor encryption is
supported by the loader at this instant. This
change makes it safe to use those features in
one's root pool, but not in one's root dataset.

Approved by: re (gjb)