I'm not really sure that the Debian packaging should even be in the business of setting default supported_enctypes (or other things, perhaps). Upstream seems to be doing okay at it, with 3des and arcfour removed for 1.14.
1DES has been known week for enough years that I don't support keeping it around even as a backup. -Ben
