RFC 8221 does not outright ban 3des as the algorithms deprecated for
13 in r348205, but it is listed as a SHOULD NOT and will likely be a
MUST NOT by the time 1413 ships.
To permit the NIST-KAT tests to still run for 3des, push the /dev/crypto
deprecation for 3des off to 14 as well.