KEX_CLIENT_ENCRYPT
KEX_CLIENT_ENCRYPT, \
def_cipher = match_filter_allowlist(KEX_CLIENT_ENCRYPT, all_cipher);