Enclose redhat specific configuration with Match final block
    
    This allows users to specify options in user configuration files overwriting
    the defaults we propose without ovewriting them in the shipped configuration
    file and without opting out from the crypto policy altogether.
    
    Resolves: rhbz#1438326 rhbz#1630166