please downgrade aes192-ctr to optional

[perkelix]

Would it be possible to downgrade aes192-ctr to merely optional? IMHO, if a policy has aes256-ctr, it ought to fullfil the requirement for a strong CTR.

[jtesta]

You'd like to make it optional in which policy?

[perkelix]

In all of them. I would treat aes192-ctr the same as ssh-audit currently treats cert-v01 variants as merely nice to have.