openssl: re-enable CMAC support