kconf non-hardware crypt.cfg